Block internet access to computer, but allowing LAN access

Question

Hello,&nbsp;&nbsp;I have an RBR40 Orbi system. I'd like to connect computers to the LAN, but not allow them to access the internet (and not allow the internet to access them). How do I do that?&nbsp;&nbsp;I have trawled the forum and the manuals but do not see how to do this. Sorry for my naive questions!&nbsp;&nbsp;Thanks,&nbsp;&nbsp;&nbsp;- Peter

pdolmsted · Answer

I attach a screenshot with my config; does this look right?&nbsp;&nbsp;Thanks for your help.&nbsp;

CrimpOn · Answer

I would have selected "Any" from the drop down menu, which automatically fills in the 1 and 65535 values and selects both TCP/UDP.
&nbsp;
This is a definite puzzle.&nbsp; I swear that I tried this feature before and it worked as it should. Local access was fine, but internet access was completely blocked. (The router firewall blocks all incoming connections, so there is no "blocking" setup required for that.)
This time,

I blocked my cell phone and in addition to totally blocking the internet, it blocked access to the LAN as well. Could not even ping local resources.
I then blocked a PC connected by wire to the router.&nbsp; Internet access was blocked, but LAN access remained.

So now I am totally stunned.&nbsp; Could it be that block sites works differently depending on whether the device is connected by wire or by WiFi?
&nbsp;
How was the target device for your test connected?
&nbsp;
This is on Orbi firmware v2.7.4.24. I should also point out that (at least on the Orbi)&nbsp; pressing "Apply" does not result in changes taking place immediately.&nbsp; Any experiments should probably give the system at least a couple of minutes for changes to propagate first.

CrimpOn · Answer

I experimented again with Block Sites.&nbsp; Using a cell phone which can switch over to LTE data was not a good test.
This time, the test device was a Samsung Galaxy Tablet.&nbsp; Used Block Sites to block "Any", which filled in TCP/UDP and 1-65535, and entered the IP address of the tablet.
&nbsp;
Immediately, the tablet could not access the internet

No web browser
Apps such as Flight Radar could not connect.

But, the tablet could access

The Orbi web management site
My Pi-hole server

This appears to validate that Block Sites does exactly as intended.&nbsp; "No internet", but can access local devices.
&nbsp;
If this is still an open issue, I'm happy to run more tests.

microchip8 · Answer

If you have on the Orbi "Block Services" in Advanced -&gt; Security, you can block all ports from 1 to 65535. Make sure the device to block has a fixed/reserved DHCP IP address assigned by the router.

pdolmsted · Answer

Thanks for the reply.&nbsp;I tried this but then the computer can’t access or do anything *on* the LAN. Is there something else to try ? I want to have full access ON the LAN &nbsp;but no traffic with the outside world.&nbsp;&nbsp;- Peter

Forum Discussion

Block internet access to computer, but allowing LAN access

6 Replies